Last updated: 19 October 2026
Milan ("we", "us") is operated by Atul Wadhwa, ABN 65 359 989 637, Australia. Contact: hello@milandating.com.
We comply with the Australian Privacy Act 1988 (Australian Privacy Principles) and, where they apply, the GDPR/UK GDPR, India's Digital Personal Data Protection Act 2023, and US state privacy laws.
Milan is only for adults aged 18 or older. We check date of birth at sign-up and remove accounts we believe belong to minors.
| Category | Examples | Why |
|---|---|---|
| Account | email address, phone number (for verification) | sign-in, security, verification |
| Profile | name, date of birth, gender, who you're interested in, country, city, home state, languages, religion (optional), diet, relationship intent, bio, photos | to show your profile and suggest matches |
| Verification | selfie photo, verification result | to show the "Verified" badge and prevent fake profiles. Selfies are never shown on your profile |
| Content | messages, view-once photos, posts, comments, likes | to provide chat and the Feed |
| Safety | reports, blocks, moderation notes | to keep the community safe |
| Purchases | subscription status (we receive this from Apple/Google via RevenueCat; we never see card details) | to provide Milan Gold |
| Device/technical | app version, device type, crash data, approximate time zone | reliability and security |
Sensitive information. Religion and some profile details can reveal sensitive information (for example religious beliefs or sexual orientation). You choose whether to provide them, and they're used only to show your profile and help with matching. You can remove them at any time.
We do not collect precise GPS location. We do not sell personal information and we don't use it for third-party advertising.
Providing the service (profiles, Discover, matching, chat, Feed); verification and fraud prevention; safety and moderation, including reviewing reported content; customer support; processing subscriptions; complying with law.
Other members can see your profile (name, age unless hidden, city, country, photos, bio and the details you add) and your posts and comments. Messages are only visible to you and your match. View-once photos are deleted from our servers as soon as they are opened. Incognito mode hides you from Discover.
With service providers who process data for us under contract: Supabase Inc. (database, file storage and sign-in, hosted in Mumbai, India); our email delivery provider (sends sign-in codes and account emails); our SMS verification provider (sends phone verification codes); RevenueCat (subscription status); and our payment processors, Apple App Store and Google Play (payments are handled by Apple or Google and passed to us via RevenueCat; we never see card details). Selfie verification photos are reviewed by our own team and are not shared with a verification provider. If we add an automated verification provider or voice/video calls, we will update this policy before they are used. With law enforcement when required by law or to prevent serious harm. With a buyer if the business is sold (you'll be told).
Your account, profile, photos, messages, posts and verification data are stored in India, in Supabase's Mumbai data centre (AWS ap-south-1 region). Supabase Inc. (USA) operates that infrastructure for us, so Supabase staff in the United States and other countries may access data where needed to run and support the service.
Under Australian Privacy Principle 8, this means we disclose personal information to recipients outside Australia, mainly in India and the United States. Other providers may also process limited data overseas: RevenueCat (USA, subscription status), Apple and Google (worldwide, payments), and our email delivery and SMS verification providers (mainly the United States, for email addresses, phone numbers and the codes we send).
Before disclosing information overseas, we take reasonable steps to make sure these recipients handle it consistently with the APPs. This includes written contracts (data processing agreements) requiring them to protect it, use it only to provide services to us, and keep it secure. Under the Privacy Act we remain accountable for how they handle your information. Indian law (including the Digital Personal Data Protection Act 2023) may allow Indian authorities to request access to data stored there.
If you're in the EU or UK, transfers rely on the providers' Standard Contractual Clauses.
We keep your data while your account is active. When you delete your account in Settings → Delete account, we delete your profile, photos, matches, messages, posts and comments right away, except for limited records we must keep for safety (for example reports about you, kept for up to 12 months) or legal reasons.
You can access, correct and delete your information in the app, or contact us. You can complain to us first and then to the Office of the Australian Information Commissioner (oaic.gov.au) or your local regulator.
Encryption in transit, access controls on every database table, private storage buckets, and screenshot protection on chats where the platform allows it. No system is perfectly secure.
We'll tell you in the app about important changes.
Atul Wadhwa - hello@milandating.com
Home · Privacy · Terms · Support · Delete account